Sun Java System Directory Server Enterprise Edition 6.3 Administration Guide

ACI “Create Group”

In LDIF, to grant employees the right to create a group entry under the ou=Social Committee branch, you would write the following statement:

aci: (targetattr="*") (targattrfilters="add=objectClass: 
(version 3.0; acl "Create Group"; allow (read,search,add) 
userdn= "ldap:///uid=*,ou=People,dc=example,dc=com") 
and dns="*";)

This example assumes that the ACI is added to the ou=Social Committee,dc=example,dc=com entry.

Note –